Extracted

• • Target

    2966d2d67e88dfbe61626011df4e59ece5cd40086d3a5dd1d7f6001770041ff9N.exe

  • Size

    288KB

  • MD5

    de396b3186b3298287542bbecd3d7e00

  • SHA1

    026c74cbfef67f58022709047e846102de42bcf2

  • SHA256

    2966d2d67e88dfbe61626011df4e59ece5cd40086d3a5dd1d7f6001770041ff9

  • SHA512

    8f0916b714fed50c174e1ad9b10c69c10bde3356b758cbea1fede92c033e91e346a0c97815ed8d2ab58bf417535c30c2d5b767ba2013233b428ce115d023216b

  • SSDEEP

    3072:39efVGREi0RPe87LDT1Yx07KlFYzqpCZSLMi5lQvuIbuzj1DukJFv7I7JxxI/jsm:39UVG+mMLl+wGXAF2PbgKLVN

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2